Bug ID 1205061: DNSSEC keys removed from the configuration before expiration date when iQuery connection goes down

Last Modified: Apr 24, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 17.0.0.1, 17.0.0.2

Opened: Dec 05, 2022

Severity: 3-Major

Symptoms

DNSSEC keys removed from the configuration before expiration date.

Impact

Removing KSK from the configuration before the expiration date can cause the outage if the user has not updated DS record.

Conditions

On a GTM sync group, if the iQuery connection goes down, the DNSSEC keys are removed from the configuration before expiration date on DNS device with gtm.peerinfolocalid greater than zero.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips